The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support     is enabled. If the parser is running on user supplied input, an attacker may supply content that causes     the parser to crash by stackoverflow. This effect may support a denial of service attack. (CVE-2022-40152)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of IBM Engineering Requirements Management DOORS (formerly IBM Rational DOORS) installed on the remote host is 9.6.1.1 prior or equal to 9.6.1.13 or 9.7.2.1 prior or equal to 9.7.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 7279145 advisory.

  - IBM DOORS Web Access do not limit the length of a connection which could allow for a Slowloris HTTP denial     of service attack to take place. This can cause the web server to become unresponsive. (CVE-2024-25039)

  - IBM DOORS Web Access is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated     attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality     potentially leading to credentials disclosure within a trusted session. (CVE-2025-0152)

  - IBM DOORS Web Access could allow a remote attacker to obtain sensitive information when a detailed     technical error message is returned in the browser. This information could be used in further attacks     against the system. (CVE-2020-4984)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4226 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.1.10 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.1.9, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.1.9 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by denial of service vulnerability as referenced in the July 2024 CPU advisory. Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper (Woodstox)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle JDeveloper.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680589 advisory.

    Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support     is enabled. If the parser is running on user supplied input, an attacker may supply content that causes     the parser to crash by stackoverflow. This effect may support a denial of service attack.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Oracle Business Intelligence Publisher (OAS) installed on the remote host are affected by a vulnerability as referenced in the October 2023 CPU advisory.

  - Vulnerability in the BI Publisher product of Oracle Analytics (component: Development Operations     (XStream)). The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks of     this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of BI Publisher. (CVE-2022-40152)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4437 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.3.13 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.3.12, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.3.13 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.3.13 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.3.12, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.3.13 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson [eap-7.3.z]     (CVE-2022-25647)

    * woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks [eap-7.3.z]     (CVE-2022-40152)

    * xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr [eap-7.3.z]     (CVE-2022-0084)

    * artemis-commons: Apache ActiveMQ Artemis DoS [eap-7.3] (CVE-2022-23913)

    * Moment.js: Path traversal  in moment.locale [eap-7.3.z] (CVE-2022-24785)

    * jettison: memory exhaustion via user-supplied XML or JSON data [eap-7.3.z] (CVE-2022-40150)

    * snakeyaml: Denial of Service due to missing nested depth limitation for collections [eap-7.3.z]     (CVE-2022-25857)

    * jettison: parser crash by stackoverflow [eap-7.3.z] (CVE-2022-40149)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
252500	Linux Distros Unpatched Vulnerability : CVE-2022-40152	Nessus	Misc.	2025/8/20	2026/9/2	high
333335	IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 <= 9.7.2.11 Multiple Vulnerabilities (7279145)	Nessus	Windows	2026/8/7	2026/9/29	high
237013	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 (RHSA-2025:4226)	Nessus	Red Hat Local Security Checks	2025/5/21	2025/6/5	high
205003	Oracle JDeveloper DoS (July 2024 CPU)	Nessus	Misc.	2024/8/6	2025/2/26	high
266906	Unity Linux 20.1070e Security Update: woodstox-core (UTSA-2025-680589)	Nessus	Unity Linux Local Security Checks	2025/10/7	2025/10/10	high
183411	Oracle Business Intelligence Publisher 6.4 (OAS) (October 2023 CPU)	Nessus	Misc.	2023/10/19	2023/10/20	high
235116	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.13 (RHSA-2025:4437)	Nessus	Red Hat Local Security Checks	2025/5/5	2025/6/5	high

检测

插件搜索

high

high

high

high

high

high

high